Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/CBJrUvdtmM5lZb_w3LadNqvoSfM.roa
File: CBJrUvdtmM5lZb_w3LadNqvoSfM.roa (raw, json)
Hash identifier: DlDAPU1cK6gZLkORgTPrr9V0EHMC8P3blHT78fXZZ3s=
Subject key identifier: 08:12:6B:52:F7:6D:98:CE:65:65:BF:F0:DC:B6:9D:36:AB:E8:49:F3
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1868
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/CBJrUvdtmM5lZb_w3LadNqvoSfM.roa
Signing time: Sun 08 Jun 2025 15:09:34 +0000
ROA not before: Sun 08 Jun 2025 15:09:34 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 125.169.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6248 (0x1868)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 8 15:09:34 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=08126B52F76D98CE6565BFF0DCB69D36ABE849F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f8:1f:4e:0b:bf:eb:8d:bb:92:3e:7a:a3:e5:
f4:39:62:c2:7b:8b:95:59:da:be:ba:e8:71:5a:c3:
f0:f2:f0:5a:54:b9:02:6a:a6:85:7d:81:63:64:1d:
74:35:bd:6a:3d:ab:b6:09:72:40:35:e4:28:13:6b:
db:ed:04:cc:21:8a:77:74:6b:d8:0a:9d:21:4e:d4:
0d:6f:b5:a4:60:46:37:4b:12:d1:60:44:5a:d1:c6:
79:1c:de:bc:43:18:78:c0:e5:e8:be:48:28:8b:18:
9f:b5:42:22:f2:1f:7b:92:8e:8b:39:cb:09:1f:45:
90:d3:e7:00:3b:46:86:35:6d:d7:d9:1f:d2:8f:4e:
39:cb:27:5e:bb:89:ef:33:df:bf:90:83:72:26:02:
76:ab:bb:94:26:1f:3a:2e:85:21:cc:99:f5:1d:dc:
8f:73:61:52:e3:3a:3b:a6:2f:0e:91:63:91:ee:d9:
fd:56:11:75:7b:bc:aa:65:0b:f8:de:62:a4:37:5f:
a4:91:57:5f:94:00:7a:0f:06:b0:64:99:49:a3:af:
09:48:f0:78:72:b0:de:32:e4:17:41:1a:f0:06:11:
a7:46:87:24:be:c3:fe:a5:e5:32:9f:bc:b1:b2:b8:
c5:92:d7:ca:43:b4:24:0e:9e:1f:d7:d6:68:94:0f:
a1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:12:6B:52:F7:6D:98:CE:65:65:BF:F0:DC:B6:9D:36:AB:E8:49:F3
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/CBJrUvdtmM5lZb_w3LadNqvoSfM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
125.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
79:57:eb:42:ea:4c:dd:3f:40:51:59:46:d8:db:7c:8f:8a:10:
39:69:6a:1a:d7:12:71:0e:a8:3a:ad:a8:96:1f:cd:76:32:f6:
0d:93:93:d6:d2:22:4a:4e:05:d2:12:cb:30:12:a0:ca:2d:ad:
ed:32:76:d8:07:38:a1:48:23:6b:9f:55:a2:91:f1:70:c3:53:
c7:b8:47:f8:25:1f:99:c2:00:f6:fa:de:01:cb:d0:34:2c:4f:
6c:9c:4b:f2:cc:a4:01:1f:36:f9:45:e2:7d:a1:74:db:6c:e8:
c7:06:1b:71:86:4c:c4:b7:c4:55:9d:29:37:c3:df:94:51:56:
78:05:61:b9:8f:7f:af:be:60:d8:18:45:69:e6:8c:e9:7d:7c:
91:8e:c3:9a:c5:ec:e6:48:71:9f:e0:77:39:fa:dc:b9:f0:2d:
a5:e6:5f:27:8a:8c:f2:c4:04:a5:c7:0d:3d:d2:8f:93:eb:ae:
1b:c7:d3:ad:af:69:fb:41:da:42:95:3d:6e:bf:66:86:48:75:
89:47:a8:e9:e9:1f:18:b1:2f:ea:67:41:0a:7a:a2:94:98:8c:
92:94:b8:5a:d4:e9:de:1e:ce:41:44:6f:0b:ee:cd:82:36:28:
c6:ab:c1:42:fa:bc:de:de:33:e5:67:9a:2c:93:69:d5:23:4f:
39:18:d0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:56:53 2025 by rpki-client